Static task
static1
Behavioral task
behavioral1
Sample
a028cb5fc29ef3c5b77951b14f30ff0f_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a028cb5fc29ef3c5b77951b14f30ff0f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a028cb5fc29ef3c5b77951b14f30ff0f_JaffaCakes118
-
Size
104KB
-
MD5
a028cb5fc29ef3c5b77951b14f30ff0f
-
SHA1
43d39c0a3111df4ed7278eddb97a5ca78aea8d21
-
SHA256
c7c2cf02776a083bfb03c1a41e67ef01b2bb58026537143ef8f9f1f9a4182125
-
SHA512
9a92c256f464dc4b2043b4da916a3938484e3fbc02d53c93c8f7939557519cc6fb650ffdfb35649eedcf72a34916c67ab55740efb41175ec928eafdccd2f9efb
-
SSDEEP
3072:YI1MyrOdiy7KLDmuLHZ/s4gGxuoGvhhfiQ/rbfg:dFOZOLDs41CSUo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a028cb5fc29ef3c5b77951b14f30ff0f_JaffaCakes118
Files
-
a028cb5fc29ef3c5b77951b14f30ff0f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
g Size: - Virtual size: 176KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ckesfh Size: 103KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
l4tepgmi Size: 253B - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE